March 2024 - openSUSE Factory - openSUSE Mailing Lists

Any pulumi users out there?
by Johannes Kastl 29 Mar '24

29 Mar '24

Hi all, I recently package pulumi (pulumi.org) and am keeping it up to date, as I wanted to evaluate it for work. > https://build.opensuse.org/package/show/systemsmanagement/pulumi I had not time to test it yet, unfortunately. So if there are any pulumi users out there who would like to give it a spin: Feedback is highly welcome! Kind Regards, Johannes

1 1

New Tumbleweed snapshot 20240328 released!
by Dominique Leuenberger 29 Mar '24

29 Mar '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: acpica (20230628 -> 20240321) avahi avahi-glib2 bluedevil6 (6.0.2 -> 6.0.3) breeze6 (6.0.2 -> 6.0.3) breeze6-gtk (6.0.2 -> 6.0.3) ceph (16.2.14.66+g7aa6ce9419f -> 16.2.15.68+gbb20a17289a) crda curl (8.6.0 -> 8.7.1) discover6 (6.0.2 -> 6.0.3) flatpak-kcm6 (6.0.2 -> 6.0.3) gnutls (3.8.3 -> 3.8.4) kactivitymanagerd6 (6.0.2 -> 6.0.3) kde-cli-tools6 (6.0.2 -> 6.0.3) kde-gtk-config6 (6.0.2 -> 6.0.3) kdecoration6 (6.0.2 -> 6.0.3) kdeplasma6-addons (6.0.2 -> 6.0.3) kgamma6 (6.0.2 -> 6.0.3) kglobalacceld6 (6.0.2 -> 6.0.3) kinfocenter6 (6.0.2 -> 6.0.3) kmenuedit6 (6.0.2 -> 6.0.3) kpipewire6 (6.0.2 -> 6.0.3) kscreen6 (6.0.2 -> 6.0.3) kscreenlocker6 (6.0.2 -> 6.0.3) ksshaskpass6 (6.0.2 -> 6.0.3) ksystemstats6 (6.0.2 -> 6.0.3) kwayland-integration6 (6.0.2 -> 6.0.3) kwayland6 (6.0.2 -> 6.0.3) kwin6 (6.0.2 -> 6.0.3.1) kwrited6 (6.0.2 -> 6.0.3) layer-shell-qt6 (6.0.2 -> 6.0.3) libkscreen6 (6.0.2 -> 6.0.3) libksysguard6 (6.0.2 -> 6.0.3) libplasma6 (6.0.2 -> 6.0.3) libreoffice (24.2.1.2 -> 24.2.2.2) milou6 (6.0.2 -> 6.0.3) ocean-sound-theme6 (6.0.2 -> 6.0.3) openSUSE-release (20240327 -> 20240328) ovmf pam_kwallet6 (6.0.2 -> 6.0.3) perl-HTML-Parser (3.81 -> 3.820.0) perl-HTML-Tagset (3.20 -> 3.240.0) perl-IO-Socket-SSL (2.84.0 -> 2.85.0) perl-LWP-Protocol-https (6.130.0 -> 6.140.0) perl-MIME-tools (5.511.0 -> 5.514.0) perl-Net-SSLeay (1.92 -> 1.940.0) perl-libwww-perl (6.760.0 -> 6.770.0) plasma5support6 (6.0.2 -> 6.0.3) plasma6-activities (6.0.2 -> 6.0.3) plasma6-activities-stats (6.0.2 -> 6.0.3) plasma6-browser-integration (6.0.2 -> 6.0.3) plasma6-desktop (6.0.2 -> 6.0.3) plasma6-disks (6.0.2 -> 6.0.3) plasma6-integration (6.0.2 -> 6.0.3) plasma6-nm (6.0.2 -> 6.0.3) plasma6-openSUSE plasma6-pa (6.0.2 -> 6.0.3) plasma6-print-manager (6.0.2 -> 6.0.3) plasma6-systemmonitor (6.0.2 -> 6.0.3) plasma6-thunderbolt (6.0.2 -> 6.0.3) plasma6-workspace (6.0.2 -> 6.0.3) polkit-kde-agent-6 (6.0.2 -> 6.0.3) power-profiles-daemon (0.13 -> 0.20) powerdevil6 (6.0.2 -> 6.0.3) qqc2-breeze-style6 (6.0.2 -> 6.0.3) qt6-base (6.6.2 -> 6.6.3) qt6-declarative (6.6.2 -> 6.6.3) qt6-imageformats (6.6.2 -> 6.6.3) qt6-multimedia (6.6.2 -> 6.6.3) qt6-networkauth (6.6.2 -> 6.6.3) qt6-positioning (6.6.2 -> 6.6.3) qt6-qt5compat (6.6.2 -> 6.6.3) qt6-quick3d (6.6.2 -> 6.6.3) qt6-quicktimeline (6.6.2 -> 6.6.3) qt6-sensors (6.6.2 -> 6.6.3) qt6-shadertools (6.6.2 -> 6.6.3) qt6-speech (6.6.2 -> 6.6.3) qt6-svg (6.6.2 -> 6.6.3) qt6-tools (6.6.2 -> 6.6.3) qt6-translations (6.6.2 -> 6.6.3) qt6-virtualkeyboard (6.6.2 -> 6.6.3) qt6-wayland (6.6.2 -> 6.6.3) qt6-webchannel (6.6.2 -> 6.6.3) qt6-webengine (6.6.2 -> 6.6.3) qt6-webview (6.6.2 -> 6.6.3) sddm-kcm6 (6.0.2 -> 6.0.3) systemsettings6 (6.0.2 -> 6.0.3) tree-sitter usb_modeswitch wacomtablet-kcm6 (6.0.2 -> 6.0.3) webkit2gtk3 wireless-tools xdg-desktop-portal-kde6 (6.0.2 -> 6.0.3) xz (5.6.1 -> 5.6.1.revertto5.4) === Details === ==== acpica ==== Version update (20230628 -> 20240321) - Use local source, there currently is no fixed tarball URL - Use AslGbl_Deterministic by default FALSE to not compile in Date/Time into ACPI table compilings - Update to version 20240321 * Get rid of MSVC warnings that arise actually due to GCC's new dangling pointer warning and also tGCC's blindspot to work with nested named structs/unions resulting in breaking of ACPI event-handling * events/evgpeinit: don't forget to increment registered GPE count * events/evxfgpe: correctly clear GPE_AUTO_ENABLED in AcpiSetupGpeForWake * Fix Capabilities[1024] mess * Update actbl2.h to get rid of the MSVC error C2233 * Fix CXL 3.0 structure (RDPAS) in the CEDT table * ACPICA: debugger: check status of AcpiEvaluateObject in AcpiDbWalkForFields * SRAT: Add dump and compiler support for RINTC affinity structure * SRAT: Add RISC-V RINTC affinity structure * Modify ACPI_OBJECT_COMMON_HEADER * Fix spelling and typos: Clean up the fix for Issue #900 * Clean up the fix for Issue #900 * tests/common: use CopyObject instead of Store for NRMT * acgcc: Fix C++ issue with ACPI_FLEX_ARRAY * MADT: Add new MADT GICC/GICR/ITS non-coherent flags handling * MADT: Add GICC online capable bit handling * Fix various spelling mistakes in text files and code comments * acpisrc: Add identifiers for the NHLT table * NHLT: Reintroduce types the table consists of * AdDisassemblerHeader: omit timestamp for deterministic output * Fix build indeterminism for asm compiler header. * os_specific: zephyr: update AcpiOsGetTimer with arch specific timer * osal: zephyr: Fix write access for mapped memory * osal: zephyr: Fix AcpiOsPrintf implementation * Fix issue #896 * Attempt 1 to fix issue #900 * ACPI 6.5: RAS2: Add support for RAS2 table * Add port definitions for CDAT SSLBIS * dmtbdump2: remove redundant failure check on Status * dmtbdump: remove duplicated code for both paths of an if statement * NHLT: Drop preliminary support * Revert "NHLT: Declare device configuration types" * os_specific: zephyr: add generic platform support * Fix segfault when error-checking mixed table types * actbl1.h: Add EINJ CXL error types * Get rid of // style comments * NHLT: Declare device configuration types * dmtbinfo2.c: RISC-V: Remove redundant Flags print ==== avahi ==== Subpackages: avahi-lang libavahi-client3 libavahi-client3-32bit libavahi-common3 libavahi-common3-32bit libavahi-core7 - Add avahi-CVE-2023-38471.patch: Extract host name using avahi_unescape_label (bsc#1216594, CVE-2023-38471). - Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource records (bsc#1216598, CVE-2023-38469). ==== avahi-glib2 ==== Subpackages: libavahi-glib1 libavahi-gobject0 libavahi-ui-gtk3-0 - Add avahi-CVE-2023-38471.patch: Extract host name using avahi_unescape_label (bsc#1216594, CVE-2023-38471). - Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource records (bsc#1216598, CVE-2023-38469). ==== bluedevil6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: bluedevil6-lang - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * Remove sl documentation * update version for new release * fix pairing bug ==== breeze6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: breeze6-cursors breeze6-decoration breeze6-style breeze6-style-lang - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release * kstyle/animations: Call QWidget::update in BusyIndicatorEngine * Use QEvent::ApplicationPaletteChanged instead of QEvent::PaletteChanged * kstyle: Don't send event to disabled scroll bar (kde#483487) ==== breeze6-gtk ==== Version update (6.0.2 -> 6.0.3) Subpackages: gtk2-metatheme-breeze6 gtk3-metatheme-breeze6 gtk4-metatheme-breeze6 metatheme-breeze6-common - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * fix ecm version number * update version for new release ==== ceph ==== Version update (16.2.14.66+g7aa6ce9419f -> 16.2.15.68+gbb20a17289a) Subpackages: librados2 librbd1 - Update to 16.2.15-68-gbb20a17289a: + mds: disable `defer_client_eviction_on_laggy_osds' by default + ceph.spec.in: Advertise users/groups that are generated by the pre scripts + cmake: Ensure git exists before executing it + make-dist: strip "-%{release}" from ceph package Requires - Drop ceph-cmake-3.28.patch (now included in source tarball) ==== crda ==== - Use %patch -P N instead of deprecated %patchN. ==== curl ==== Version update (8.6.0 -> 8.7.1) Subpackages: libcurl4 - Update to 8.7.1: * Fixed empty tool_hugehelp.c file - Update to 8.7.0: * Security fixes: - [bsc#1221665, CVE-2024-2004] Usage of disabled protocol - [bsc#1221667, CVE-2024-2398] HTTP/2 push headers memory-leak - [bsc#1221666, CVE-2024-2379] QUIC certificate check bypass with wolfSSL - [bsc#1221668, CVE-2024-2466] TLS certificate check bypass with mbedTLS * Changes: - configure: add --disable-docs flag - CURLINFO_USED_PROXY: return bool whether the proxy was used - digest: support SHA-512/256 * Bugfixes: - asyn-thread: use wakeup_close to close the read descriptor - bufq: writing into a softlimit queue cannot be partial - cmake: add USE_OPENSSL_QUIC support - cookie: if psl fails, reject the cookie - curl: exit on config file parser errors - digest: add check for hashing error - docs/libcurl: add TLS backend info for all TLS options - file: use xfer buf for file:// transfers - ftp: do lineend conversions in client writer - ftp: fix socket wait activity in ftp_domore_getsock - http2: memory errors in the push callbacks are fatal - http2: push headers better cleanup - libssh/libssh2: return error on too big range - OpenSSL QUIC: adapt to v3.3.x - setopt: fix check for CURLOPT_PROXY_TLSAUTH_TYPE value - setopt: fix disabling all protocols - sha512_256: add support for GnuTLS and OpenSSL - smtp: fix STARTTLS - strtoofft: fix the overflow check - TIMER_STARTTRANSFER: set the same for everyone - TLS: start shutdown only when peer did not already close - tool_getparam: accept a blank -w "" - tool_getparam: handle non-existing (out of range) short-options - tool_operate: change precedence of server Retry-After time - transfer.c: break receive loop in speed limited transfers - version: allow building with ancient libpsl - vquic-tls: fix the error code returned for bad CA file - vtls: fix tls proxy peer verification - vtls: revert "receive max buffer" + add test case - VULN-DISCLOSURE-POLICY.md: update detail about CVE requests - websocket: fix curl_ws_recv() * Remove patch upstream: - 0001-vtls-revert-receive-max-buffer-add-test-case.patch ==== discover6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: discover6-backend-flatpak discover6-backend-fwupd discover6-backend-packagekit discover6-lang discover6-notifier - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * revert duplicated appstream edit * update version for new release * kns: Make sure we only launch requests once * kns: fix entry deduplication * packagekitbackend: de-thread the appstream loading hotfix * Fix build with c++17 * flatpak: Rescue local files that might exist before creating a new file ==== flatpak-kcm6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: flatpak-kcm6-lang - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - No code changes since 6.0.2 ==== gnutls ==== Version update (3.8.3 -> 3.8.4) Subpackages: libgnutls-dane0 libgnutls30 libgnutls30-32bit - jitterentropy: Release the memory of the entropy collector when using jitterentropy with phtreads as there is also a pre-intitization done in the main thread. [bsc#1221242] * Add gnutls-FIPS-jitterentropy-deinit-threads.patch - Update to 3.8.4: * libgnutls: RSA-OAEP encryption scheme is now supported To use it with an unrestricted RSA private key, one would need to initialize a gnutls_x509_spki_t object with necessary parameters for RSA-OAEP and attach it to the private key. It is also possible to import restricted private keys if they are stored in PKCS#8 format. * libgnutls: Fix side-channel in the deterministic ECDSA. Reported by George Pantelakis (#1516). [GNUTLS-SA-2023-12-04, CVSS: medium] [bsc#1221746, CVE-2024-28834] * libgnutls: Fixed a bug where certtool crashed when verifying a certificate chain with more than 16 certificates. Reported by William Woodruff (#1525) and yixiangzhike (#1527). [GNUTLS-SA-2024-01-23, CVSS: medium] [bsc#1221747, CVE-2024-28835] * libgnutls: Compression libraries are now loaded dynamically as needed instead of all being loaded during gnutls library initialization. As a result, the library initialization should be faster. * build: The gnutls library can now be linked with the static library of GMP. Note that in order for this to work libgmp.a needs to be compiled with -fPIC and libhogweed in Nettle also has to be linked to the static library of GMP. This can be used to prevent custom memory allocators from being overriden by other applications. * API and ABI modifications: - gnutls_x509_spki_get_rsa_oaep_params: New function. - gnutls_x509_spki_set_rsa_oaep_params: New function. - GNUTLS_PK_RSA_OAEP: New enum member of gnutls_pk_algorithm_t. * Rebase patches: - gnutls-FIPS-140-3-references.patch - gnutls-FIPS-HMAC-nettle-hogweed-gmp.patch ==== kactivitymanagerd6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: kactivitymanagerd6-lang - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - No code changes since 6.0.2 ==== kde-cli-tools6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: kde-cli-tools6-lang - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * Remove sl documentation * update version for new release ==== kde-gtk-config6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: kde-gtk-config6-gtk3 - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release * gtkconfig.upd: Set Version=6 (kde#482763) - Drop patches, now upstream: * 0001-gtkconfig.upd-Set-Version-6.patch ==== kdecoration6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: libkdecorations2-6 libkdecorations2-6-lang libkdecorations2private11 - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== kdeplasma6-addons ==== Version update (6.0.2 -> 6.0.3) Subpackages: kdeplasma6-addons-lang - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release * wallpapers/potd: check network information backend is available before querying capabilities * update version for new release * applets/weather: remove invalid bindings on Layout properties * Mark QtQuick3D as a runtime dependency ==== kgamma6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: kgamma6-lang - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== kglobalacceld6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: libKGlobalAccelD6-0 - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release * Update service-based shortcuts when service database changes (kde#479730,kde#483918) * Fix KHotkeys migration (kde#484063) * Also consider actions when querying for applications with shortcuts (kde#483214) ==== kinfocenter6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: kinfocenter6-lang - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * Remove sl documentation * update version for new release ==== kmenuedit6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: kmenuedit6-lang - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * Remove sl documentation * update version for new release ==== kpipewire6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: kpipewire6-imports libKPipeWire6 libKPipeWire6-lang libKPipeWireDmaBuf6 libKPipeWireRecord6 - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * fix typo * update version for new release * Don't set PipeWireSourceItem::enabled to true when the item becomes visible * Drop redundant isComponentComplete() checks * Remove redundant code * Mark PipeWireSourceItem as enabled after receiving a frame ==== kscreen6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: kscreen6-lang - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release * plasmoid: adapt to changed inhibition request handling (kde#477355) * OsdAction: fix finding best mode * OsdAction: fix applying mode on X11 (kde#482642) ==== kscreenlocker6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: kscreenlocker6-lang libKScreenLocker6 - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== ksshaskpass6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: ksshaskpass6-lang - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== ksystemstats6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: ksystemstats6-lang - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release * cpu: Store physical ID with core ID when looking up coretemp sensors (kde#474766) ==== kwayland-integration6 ==== Version update (6.0.2 -> 6.0.3) - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== kwayland6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: libKWaylandClient6 - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== kwin6 ==== Version update (6.0.2 -> 6.0.3.1) Subpackages: kwin6-lang kwin6-x11 libkwin6 - Update to 6.0.3.1: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3.1 - Changes since 6.0.3: * plugins/screencast: Handle failing to import dmabuf * plugins/screencast: Simplify damage calculation in region screen cast source * plugins/screencast: Drop "stream" in ScreenCastStream::streamReady * plugins/screencast: Rename ScreenCastStream::stop() to close() * plugins/screencast: Pause/resume source when stream is paused/resumed * Fix oversights on shortcut handling within Overview/Grid effect (kde#482931) * tiles: Evacuate windows in CustomTile::remove() * tiles: Use deleteLater() in CustomTile::remove() - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Too many changes to list here ==== kwrited6 ==== Version update (6.0.2 -> 6.0.3) - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== layer-shell-qt6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: libLayerShellQtInterface6 - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== libkscreen6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: libKF6Screen8 libKF6Screen8-lang libKF6ScreenDpms8 libkscreen6-plugin - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== libksysguard6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: ksysguardsystemstats6-data libKSysGuardSystemStats2 libksysguard6-imports libksysguard6-lang libksysguard6-plugins - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release * colorgrid: Use the same background color as pie/bar charts (kde#482664) * faces/piechart: Explicitly set the thickness of the chart * faces/piechart: Don't hardcode background color but base it on theme * faces/horizontalbars: Repair compact representation (kde#481949) * faces/horizontalbars: Use a fixed background rather than relying on style (kde#480415) ==== libplasma6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: libPlasma6 libPlasma6-lang libplasma6-components libplasma6-desktoptheme - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release * Do not activate containment when one of its applet is activated (kde#483941,kde#479084) ==== libreoffice ==== Version update (24.2.1.2 -> 24.2.2.2) Subpackages: libreoffice-base libreoffice-calc libreoffice-draw libreoffice-filters-optional libreoffice-gnome libreoffice-gtk3 libreoffice-icon-themes libreoffice-impress libreoffice-l10n-cs libreoffice-l10n-da libreoffice-l10n-de libreoffice-l10n-el libreoffice-l10n-en libreoffice-l10n-en_GB libreoffice-l10n-es libreoffice-l10n-fr libreoffice-l10n-hu libreoffice-l10n-it libreoffice-l10n-ja libreoffice-l10n-pl libreoffice-l10n-pt_BR libreoffice-l10n-ru libreoffice-l10n-zh_CN libreoffice-l10n-zh_TW libreoffice-mailmerge libreoffice-math libreoffice-pyuno libreoffice-qt5 libreoffice-writer libreofficekit - Update to 24.2.2.2 (24.2.2 final): https://wiki.documentfoundation.org/Releases/24.2.2/RC1 and https://wiki.documentfoundation.org/Releases/24.2.2/RC2 - Fixes large file support detection, as needed on i586 (boo#1219035). This allows building with autoconf 2.72 - Removed patch: * 0001-Allow-building-with-Java-8.patch + integrated upstream ==== milou6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: milou6-lang - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== ocean-sound-theme6 ==== Version update (6.0.2 -> 6.0.3) - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== openSUSE-release ==== Version update (20240327 -> 20240328) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== ovmf ==== Subpackages: qemu-ovmf-x86_64 - Removed EFI shell from 4mb x86_64 ovmf image because it has security concern. Removed shell can also save space of ovmf image. (bsc#1219890, CVE-2023-48733) - Updated ovmf.spec: add BUILD_SHELL=FALSE to BUILD_OPTIONS_X64 - 2mb x86_64 ovmf and smm x86_64 ovmf are already removed shell since edk2-stable202208 and earlier. - The BUILD_SHELL build option is not available on aarch64 and xen ovmf. - Shell.efi still be built independently and be packaged to ovmf-tools. User can copy it to EFI partition for running it by firmware's boot manager if they still need a shell. But user should either disables secure boot or sign Shell.efi by himself. ==== pam_kwallet6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: pam_kwallet6-32bit pam_kwallet6-common - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== perl-HTML-Parser ==== Version update (3.81 -> 3.820.0) - updated to 3.82 see /usr/share/doc/packages/perl-HTML-Parser/Changes 3.82 2024-03-13 - "img lowsrc" and "body background" are not in the HTMLv5 spec (GH#43) (Jess) - Replace "FileHandle" with "IO::File" (GH#42) (James Raspass) - Fix some minor typos (GH#41) (Yoshikazu Sawa) ==== perl-HTML-Tagset ==== Version update (3.20 -> 3.240.0) - updated to 3.24 see /usr/share/doc/packages/perl-HTML-Tagset/Changes 2024-03-11 Andy Lester * Release 3.24 No changes in functionality. Only updates metadata for builds. 2024-03-09 Andy Lester * Release 3.22 HTML::Tagset now requires Perl 5.10.1. It might run on earlier Perls but I don't have the infrastructure to test them. Added <ins> and <del> to %isPhraseMarkup (RT #151970) Fixed docs about %isBodyElement calling it %isBodyMarkup (RT #34913, RT #109024, RT #118356) Cleaned up metadata and version requirements. No changes have been made to handle HTML5. That is a bigger issue than "just add the tags to the hashes," because that would change functionality for existing users who are expecting HTML::Tagset to be HTML4. ==== perl-IO-Socket-SSL ==== Version update (2.84.0 -> 2.85.0) - Remove perl-IO-Socket-SSL-Openssl32.patch, fixed upstream - updated to 2.085 see /usr/share/doc/packages/perl-IO-Socket-SSL/Changes 2.085 2024/01/22 - #147 fix test which failed due to behavior changes in OpenSSL 3.2 - update PublicSuffix - add examples for TLS JA3/JA4 fingerprinting to tls_fingerprint/ ==== perl-LWP-Protocol-https ==== Version update (6.130.0 -> 6.140.0) - updated to 6.14 see /usr/share/doc/packages/perl-LWP-Protocol-https/Changes 6.14 2024-03-11 01:08:33Z - Inherit with 'use parent' instead of 'use base' (GH#78) (Marin Tsanov) ==== perl-MIME-tools ==== Version update (5.511.0 -> 5.514.0) - updated to 5.514 see /usr/share/doc/packages/perl-MIME-tools/ChangeLog 5.514 2024-02-06 Dianne Skoll <dianne(a)skoll.ca> * VERSION 5.514 RELEASED * Move the guts of the ambiguous_content method to MIME::Head * Add MIME::Entity->ambiguous_content that returns true if this entity or any of its parts, recursively, has a MIME::Head whose ambiguous_content method returns true. * Keep MIME::Parser->ambiguous_content as a cached version of the most recently parsed $entity->ambiguous_content. * BUGFIX: Add some missing files to MANIFEST 5.513 2024-01-25 Dianne Skoll <dianne(a)skoll.ca> * VERSION 5.513 RELEASED * Add MIME::Parser->ambiguous_content to indicate one of several types of ambiguous MIME content that could be security risks. * Add the '@duplicate_parameters' pseudo-parameter to let caller detect duplicate MIME parameters on a MIME header. 5.512 2024-01-08 Dianne Skoll <dianne(a)skoll.ca> * VERSION 5.512 RELEASED * Use much larger chunk sizes for Base-64 encoding which reduces both encoding time and space overhead. https://rt.cpan.org/Ticket/Display.html?id=128400 https://rt.cpan.org/Ticket/Display.html?id=130110 ==== perl-Net-SSLeay ==== Version update (1.92 -> 1.940.0) - Remove Use-constants-X509_VERSION_3-and-X509_REQ_VERSION_1-when-available.patch (fixed upstream) - updated to 1.94 see /usr/share/doc/packages/perl-Net-SSLeay/Changes 1.94 2024-01-08 - New stable release incorporating all changes from developer releases 1.93_01 to 1.93_05. - Summary of major changes since version 1.92: - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and 3.2, and LibreSSL 3.5 - 3.8. - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to compile, it should now be much easier to identify the cause. - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl() function are now exposed, enabling fine-grained control over the initialisation and configuration of both libraries. - libssl functions implementing TLS 1.3 PSK authentication are now exposed, in particular SSL_CTX_set_psk_find_session_callback() (on the server side) and SSL_CTX_set_psk_use_session_callback() (on the client side). - libssl functions implementing server-side TLS 1.2 PSK authentication are now exposed, in particular SSL_CTX_set_psk_server_callback(). - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a TLS server to set a callback function that is executed when the server processes a ClientHello message. - Many more libcrypto/libssl constants and functions are now exposed; see the release notes for the 1.93 developer releases for a full list. 1.93_05 2024-01-06 - Remove support for automatic detection of libssl/libcrypto via pkg-config with ExtUtils::PkgConfig if it is installed, due to the compiler and linker options provided by pkg-config being used unconditionally (which is incompatible with the OPENSSL_PREFIX detection method). The implementation of this was merged in time for developer release 1.93_03 and therefore hasn't been included in a stable release yet, so this doesn't represent a breaking change to the way in which libssl/libcrypto are detected by Makefile.PL. This is, however, a very useful feature, and we intend to bring it back in time for Net-SSLeay 1.96 after ironing out the remaining bugs. 1.93_04 2024-01-05 - Use -DOPENSSL_API_COMPAT=908 when compiling SSLeay.xs to suppress OpenSSL deprecation warnings. - Expose a number of functions that were added in recent LibreSSL releases or were not otherwise exposed before: - SSL(_CTX)_get/set_security_level in LibreSSL 3.6.0 - SSL(_CTX)_get/set_num_tickets in LibreSSL 3.5.0 - SSL(_CTX)_set_ciphersuites in LibreSSL 3.4.0 - EVP_PKEY_security_bits in LibreSSL 3.6.0 - SSL_CTX_set_keylog_callback in LibreSSL 3.5.0 - SSL_is_dtls in LibreSSL 3.3.2 - Remove Tuure Vartiainen as an active contributor. Tuure's contributions were instrumental in the transition from ad hoc testing to CI-based testing, which has greatly improved Net-SSLeay's stability, reliability and compatibility. Thanks for your contributions, Tuure! 1.93_03 2024-01-02 - Pass RAND_seed()'s sole argument to the underlying RAND_seed() function in libcrypto, rather than passing the value of a non-existent second argument. Fixes GH-427. Thanks to cgf1 for the report. - Avoid explicit and implicit use of weak hash algorithms, such as MD5 and SHA-1, in test suite. This allows tests 44_sess.t and 45_exporter.t to correctly work on systems where crypto policies prohibit their direct use and TLS versions that require them. An example of such a system is Rocky Linux 9.2. Any Red Hat Enterprise Linux 9 and derived system is likely to have similar behaviour. Thanks to Paul Howarth for the investigation and patches. - LibreSSL 3.8.0 release notes state: The POLICY_TREE and its related structures and API were removed. The affected Net::SSLeay functions are: - X509_policy_level_get0_node - X509_policy_level_node_count - X509_policy_node_get0_parent - X509_policy_node_get0_policy - X509_policy_node_get0_qualifiers - X509_policy_tree_free - X509_policy_tree_get0_level - X509_policy_tree_get0_policies - X509_policy_tree_get0_user_policies - X509_policy_tree_level_count Patch by GitHub user orbea. - Add OpenSSL 3.1 and LibreSSL 3.7 minor releases to GitHub CI testing. Update the previous minor releases to their latest versions. Add NetBSD to BSDs job and update the other BSDs and Alpine Linux jobs to cover additional and latest releases. Use the latest MacOS runners. - Expose SSL_CTX_set_client_hello_cb for setting a callback the server calls when it processes a ClientHello. Expose the following functions that can be called only from the callback. None of these are available with LibreSSL. - SSL_client_hello_isv2 - SSL_client_hello_get0_legacy_version - SSL_client_hello_get0_random - SSL_client_hello_get0_session_id - SSL_client_hello_get0_ciphers - SSL_client_hello_get0_compression_methods - SSL_client_hello_get1_extensions_present - SSL_client_hello_get_extension_order - SSL_client_hello_get0_ext - Expose constants used by SSL_CTX_set_client_hello_cb related functions. - AD_ prefixed constants naming TLS alert codes for returning from a ClientHello callback or where alert types are used - CLIENT_HELLO_ERROR, CLIENT_HELLO_RETRY and ... changelog too long, skipping 249 lines ... support for old TLS versions. ==== perl-libwww-perl ==== Version update (6.760.0 -> 6.770.0) - updated to 6.77 see /usr/share/doc/packages/perl-libwww-perl/Changes 6.77 2024-03-11 00:56:14Z - Documentation updates for GH#448 (GH#457) (Russell Shingleton) ==== plasma5support6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: libPlasma5Support6 libPlasma5Support6-lang - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== plasma6-activities ==== Version update (6.0.2 -> 6.0.3) Subpackages: libPlasmaActivities6 plasma6-activities-imports - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== plasma6-activities-stats ==== Version update (6.0.2 -> 6.0.3) Subpackages: libPlasmaActivitiesStats1 - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== plasma6-browser-integration ==== Version update (6.0.2 -> 6.0.3) Subpackages: plasma6-browser-integration-lang - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== plasma6-desktop ==== Version update (6.0.2 -> 6.0.3) Subpackages: plasma6-desktop-emojier plasma6-desktop-lang plasma6-kimpanel-ibus - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * revert duplicate appstream update * update version for new release * applets/taskmanager: remove unnecessary Layout properties * applets/taskmanager: Drop pipewire window thumbnail opacity animation * applets/taskmanager: Don't base the amount of space reserved for the thumbnail on the header (kde#481044) * Revert "Panel: Don't take keyboard focus when one of its widgets is activated" * Folder View: fix label rendering for popup and widget views (kde#484163) * Panel: don't round floating paddings to smoothen animation * applets/kimpanel: Fix save font option * Kicker: Fix submenus appearing in taskmanager (kde#481955) * Cancel edit prior reparenting the applet * solid-device-automounter/kcm: do not create proxy widget in initializer list * Filter out enter (kde#482123) ==== plasma6-disks ==== Version update (6.0.2 -> 6.0.3) Subpackages: plasma6-disks-lang - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * revert duplicate appstream update * update version for new release ==== plasma6-integration ==== Version update (6.0.2 -> 6.0.3) Subpackages: plasma6-integration-plugin plasma6-integration-plugin-lang - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== plasma6-nm ==== Version update (6.0.2 -> 6.0.3) Subpackages: plasma6-nm-lang plasma6-nm-openconnect plasma6-nm-openvpn plasma6-nm-pptp plasma6-nm-vpnc - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release * Use "double" for storing received/sent bytes (kde#479230) ==== plasma6-openSUSE ==== Subpackages: plasma6-branding-openSUSE plasma6-sddm-theme-openSUSE plasma6-theme-openSUSE - Update to 6.0.3 ==== plasma6-pa ==== Version update (6.0.2 -> 6.0.3) Subpackages: plasma6-pa-lang - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== plasma6-print-manager ==== Version update (6.0.2 -> 6.0.3) Subpackages: plasma6-print-manager-lang - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * revert duplicate appstream update * update version for new release ==== plasma6-systemmonitor ==== Version update (6.0.2 -> 6.0.3) Subpackages: plasma6-systemmonitor-lang - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * revert duplicate appstream update * update version for new release * GlobalMenu: Fix path to AboutPage.qml * page: Fix drag-sorting of pages in PageSortDialog (kde#482377) ==== plasma6-thunderbolt ==== Version update (6.0.2 -> 6.0.3) Subpackages: plasma6-thunderbolt-lang - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - No code changes since 6.0.2 ==== plasma6-workspace ==== Version update (6.0.2 -> 6.0.3) Subpackages: plasma6-session plasma6-session-x11 plasma6-workspace-lang plasma6-workspace-libs sddm-qt6-branding-openSUSE - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Too many changes to list here ==== polkit-kde-agent-6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: polkit-kde-agent-6-lang - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== power-profiles-daemon ==== Version update (0.13 -> 0.20) - remove dependency on /usr/bin/python3 using %python3_fix_shebang macro, [bsc#1212476] - Remove duplicate DBus service files net.hadess.PowerProfiles - Update to version 0.20: * Service has new name 'org.freedesktop.UPower.PowerProfiles' * Allow multiple power-profiles-daemon drivers to load simultaneously * amdgpu panel power savings which uses dedicated hardware in systems with integrated Radeon graphics to decrease panel power consumption when the system is on battery - Add python3-shebang.patch: * resolve env-script-interpreter error ==== powerdevil6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: powerdevil6-lang - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release * kcmodule: Don't crash when a configured button action is unsupported (kde#482668) ==== qqc2-breeze-style6 ==== Version update (6.0.2 -> 6.0.3) - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release ==== qt6-base ==== Version update (6.6.2 -> 6.6.3) Subpackages: libQt6Concurrent6 libQt6Core6 libQt6DBus6 libQt6Gui6 libQt6Network6 libQt6OpenGL6 libQt6OpenGLWidgets6 libQt6PrintSupport6 libQt6Sql6 libQt6Test6 libQt6Widgets6 libQt6Xml6 qt6-network-tls qt6-networkinformation-glib qt6-networkinformation-nm qt6-platformtheme-gtk3 qt6-printsupport-cups qt6-sql-mysql qt6-sql-sqlite - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released - Make libQt6PrintSupport6 require qt6-printsupport-cups (boo#1221576) ==== qt6-declarative ==== Version update (6.6.2 -> 6.6.3) Subpackages: libQt6LabsAnimation6 libQt6LabsFolderListModel6 libQt6LabsQmlModels6 libQt6LabsSettings6 libQt6LabsSharedImage6 libQt6LabsWavefrontMesh6 libQt6Qml6 libQt6QmlCore6 libQt6QmlLocalStorage6 libQt6QmlModels6 libQt6QmlWorkerScript6 libQt6QmlXmlListModel6 libQt6Quick6 libQt6QuickControls2-6 libQt6QuickControls2Impl6 libQt6QuickDialogs2-6 libQt6QuickDialogs2QuickImpl6 libQt6QuickDialogs2Utils6 libQt6QuickEffects6 libQt6QuickLayouts6 libQt6QuickParticles6 libQt6QuickShapes6 libQt6QuickTemplates2-6 libQt6QuickTest6 libQt6QuickWidgets6 qt6-declarative-imports - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released - Drop patches, merged upstream: * 0001-QuickControls-Link-the-impl-libraries-into-the-base-.patch * 0001-Dialogs-Depend-on-controls-styles-in-QuickDialogs2Qu.patch ==== qt6-imageformats ==== Version update (6.6.2 -> 6.6.3) - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released ==== qt6-multimedia ==== Version update (6.6.2 -> 6.6.3) Subpackages: libQt6Multimedia6 libQt6MultimediaQuick6 libQt6Quick3DSpatialAudio6 libQt6SpatialAudio6 qt6-multimedia-imports - Make libQt6Multimedia6 require the qtmultimedia plugins (related: boo#1222064) - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released ==== qt6-networkauth ==== Version update (6.6.2 -> 6.6.3) - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released ==== qt6-positioning ==== Version update (6.6.2 -> 6.6.3) - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released ==== qt6-qt5compat ==== Version update (6.6.2 -> 6.6.3) Subpackages: libQt6Core5Compat6 qt6-qt5compat-imports - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released ==== qt6-quick3d ==== Version update (6.6.2 -> 6.6.3) Subpackages: libQt6Quick3D6 libQt6Quick3DAssetImport6 libQt6Quick3DAssetUtils6 libQt6Quick3DEffects6 libQt6Quick3DHelpers6 libQt6Quick3DHelpersImpl6 libQt6Quick3DParticleEffects6 libQt6Quick3DParticles6 libQt6Quick3DRuntimeRender6 libQt6Quick3DUtils6 qt6-quick3d-imports - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released ==== qt6-quicktimeline ==== Version update (6.6.2 -> 6.6.3) - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released ==== qt6-sensors ==== Version update (6.6.2 -> 6.6.3) - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released ==== qt6-shadertools ==== Version update (6.6.2 -> 6.6.3) - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released ==== qt6-speech ==== Version update (6.6.2 -> 6.6.3) Subpackages: libQt6TextToSpeech6 qt6-texttospeech - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released ==== qt6-svg ==== Version update (6.6.2 -> 6.6.3) Subpackages: libQt6Svg6 libQt6SvgWidgets6 - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released ==== qt6-tools ==== Version update (6.6.2 -> 6.6.3) Subpackages: libQt6UiTools6 qt6-tools-qdbus - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released ==== qt6-translations ==== Version update (6.6.2 -> 6.6.3) - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released ==== qt6-virtualkeyboard ==== Version update (6.6.2 -> 6.6.3) Subpackages: libQt6HunspellInputMethod6 libQt6VirtualKeyboard6 qt6-virtualkeyboard-imports - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released - Drop patch, merged upstream: * 0001-Link-VKB-and-VKB.Settings-into-VKB.Components-and-VK.patch ==== qt6-wayland ==== Version update (6.6.2 -> 6.6.3) Subpackages: libQt6WaylandClient6 libQt6WaylandCompositor6 libQt6WaylandEglClientHwIntegration6 libQt6WaylandEglCompositorHwIntegration6 libQt6WlShellIntegration6 - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released ==== qt6-webchannel ==== Version update (6.6.2 -> 6.6.3) Subpackages: libQt6WebChannel6 libQt6WebChannelQuick6 qt6-webchannel-imports - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released ==== qt6-webengine ==== Version update (6.6.2 -> 6.6.3) Subpackages: libQt6WebEngineCore6 libQt6WebEngineQuick6 libQt6WebEngineWidgets6 qt6-webengine-imports - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released ==== qt6-webview ==== Version update (6.6.2 -> 6.6.3) - Update to 6.6.3: * https://www.qt.io/blog/qt-6.6.3-released ==== sddm-kcm6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: sddm-kcm6-lang - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release * Sync the current kwin output configuration * Reset cursor theme and size to defaults if they are unset in Plasma * Allow unsetting values when syncing Plasma settings * Adapt to Qt6 QVariant::isNull() changes ==== systemsettings6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: systemsettings6-lang - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * revert double appstream update * update version for new release ==== tree-sitter ==== Subpackages: libtree-sitter0 libtree-sitter0-x86-64-v3 - Add workaround to packaging macros for RPM being to old on current Leap - Add workaround for Python below 3.9 on Leap ==== usb_modeswitch ==== Subpackages: usb_modeswitch-data - Use %patch -P N instead of deprecated %patchN. ==== wacomtablet-kcm6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: wacomtablet-kcm6-lang - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * revert duplicate metadata * update version for new release ==== webkit2gtk3 ==== Subpackages: WebKitGTK-4.1-lang libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 webkit2gtk-4_1-injected-bundles - Use WebAssembly on aarch64. It is the upstream default and no longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON, - DENABLE_WEBASSEMBLY=OFF and -DENABLE_SAMPLING_PROFILER=OFF for the same reason. - Drop webkit2gtk3-llint-build-fix.patch: no longer needed. - Update some version requirements to match cmake checks. ==== wireless-tools ==== Subpackages: libiw30 - Use %patch -P N instead of deprecated %patchN. ==== xdg-desktop-portal-kde6 ==== Version update (6.0.2 -> 6.0.3) Subpackages: xdg-desktop-portal-kde6-lang - Update to 6.0.3: * New bugfix release * For more details see https://kde.org/announcements/plasma/6/6.0.3 - Changes since 6.0.2: * update version for new release * AppChooserDialog: Reload model when Sycoca database changes ==== xz ==== Version update (5.6.1 -> 5.6.1.revertto5.4) Subpackages: liblzma5 liblzma5-32bit liblzma5-x86-64-v3 xz-lang - restore a bigger version number so that update works

1 0

Building for openSUSE_Slowroll not possible
by Manfred Hollstein 29 Mar '24

29 Mar '24

Hi there, it looks like every package building openSUSE_Slowroll fails since several hours. All show the same failure: unknown keyword in config: 13 unknown keyword in config: :macros setting SOURCE_DATE_EPOCH_MTIME to 1698938556 + exec rpmbuild -ba --define '_srcdefattr (-,root,root)' --nosignature --define '_build_create_debug 1' --define 'disturl obs://build.opensuse.org/X11:xfce/openSUSE_Slowroll/cfd03b893495f3863443d86…' /home/abuild/rpmbuild/SOURCES/xfconf.spec error: line 52: Unknown tag: "X11:xfce" == "openSUSE:" 0 This is from X11:xfce/xfconf as an example. @Bernhard, does this ring a bell? TIA, cheers. l8er manfred

1 0

Debugging Plasma 6 Krdc problem
by Joe Salmeri 28 Mar '24

28 Mar '24

I am debugging trying to debug a problem with Krdc to determine if it is a plasma 6 issue. Background I have an RDP server running xrdp which works fine with Plasma 6, HOWEVER, I need to rename the server. hostnamectl hostname <NEW-NAME> Rebooted server, updated DNS and DHCP static leases for NEW-NAME. After reboot, everything works fine using NEW-NAME, except for krdc. I can ping by name name I can ssh into server using new name On Windows machines that RDP in using NEW-NAME, they get a certificate message because the name changed and after accepting they login and everything works FINE. On Linux machines that RDP in using NEW-NAME with krdc as the lcient it displays a blue screen and never displays the xvnc login prompt nor any message about the certificate issue because of the name change. The issue is not a DNS issue since everything else works using NEW-NAME and it is not an xrdp server issue because if I use xfreerdp /v:NEW-NAME from the SAME clients that fail with krdc, it works fine and they get the xvnc login prompt and then login and get the desktop. I believe that xfreerdp works because I read something which said it is using an option to either auto accept the new certificate or to ignore it certificate issues. Bottom line is that krdc does not work when the server is renamed and xfreerdp does from the same client computer to the same RDP server. I have confirmed that this is not a client side configuration or update issue because I build a new TW machine with a brand new installation and I get the same results krdc cannot handle the server rename and xfreerdp has no issue with it. I suspect that when a client using krdc attempts to connect using the NEW-NAME that the server is still using a certificate with the OLD-NAME and when krdc gets the mismatch instead of display a message asking the user to accept the certificate it just displays the blue screen and does nothing. One other point of interest is that sometimes, when the krdc client gets the blue screen I can actually hear the login sound playing. If I rename the RDP server back to OLD-NAME then all clients using krdc work again. I have tried to find documentation on what needs to change when you rename a server as well as how to find the certificate that is causing this issue but have not been successful Other things I've tried is to run update-ca-certificates and then run xrdp-keygen xrdp to regenerate the /etc/xrdp/rsakeys.ini file but that didn't resolve the issue. Any guidance on how to find the certificate that is causing the issue would be greatly appreciated -- Regards, Joe

2 2

New Tumbleweed snapshot 20240327 released!
by Dominique Leuenberger 28 Mar '24

28 Mar '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: btrfsprogs (6.7.1 -> 6.8) gnome-text-editor gucharmap (15.1.2 -> 15.1.3) libplacebo ncurses (6.4.20240224 -> 6.4.20240323) openSUSE-release (20240326 -> 20240327) === Details === ==== btrfsprogs ==== Version update (6.7.1 -> 6.8) Subpackages: btrfsprogs-bash-completion btrfsprogs-udev-rules libbtrfs0 libbtrfsutil1 - enable zstd support for 15.6 / SLE15-SP6 build targets (bsc#1221943) - update to 6.8 * fix --enqueue option timeout handling * subvolume: remove support for undocumented options -c and -x, functionality disabled in kernel * libbtrfsutil: * version 0.1.3, backward compabile * add aliases for all existing functions with unified naming scheme * updated header defintions for recently added kernel features * send: v3 supported in experimental mode * other: * docs: manual page references, graphs, enhancements, clarifications * error handling fixes * cleanups and refactoring ==== gnome-text-editor ==== Subpackages: gnome-text-editor-lang - Add data-desktop-disable-DBusActivatable.patch: Fixes session restore in GNOME 46. ==== gucharmap ==== Version update (15.1.2 -> 15.1.3) Subpackages: gucharmap-lang libgucharmap_2_90-7 - Update to version 15.1.3: + Updated translations. ==== libplacebo ==== - Build libplacebo with python 3.11 on Leap 15 - Build with a recent gcc version Leap 15 had ==== ncurses ==== Version update (6.4.20240224 -> 6.4.20240323) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20240323 + modify tput/tset reset feature to avoid 1-second sleep if running in a pseudo-terminal. + modify check-size feature to avoid using it in a pseudoterminal (cf: 20231016) + improve formatting/style of manpages (patches by Branden Robinson). + trim a space after some "-R" options, fixing builds for applications built using clang and ncurses on Solaris. - Add ncurses patch 20240309 + modify xgterm to work around line-drawing bug -TD + use CSI 3J in vte-2017 (report by Sven Joachim) - Add ncurses patch 20240302 + add configure check for MB_LEN_MAX, to provide warning as needed. + improve formatting/style of manpages (patches by Branden Robinson). + fix regression in tput which disallowed hex/octal parameters (report by Werner Fink, cf: 20230408) + update config.guess, config.sub - Add ncurses patch 20240224 + improve man/curs_mouse.3x style (Brandon Robinson, Sven Joachim). + provide for CCHARW_MAX greater than 1 + eliminate use of PATH_MAX in lib_trace.c + work around misconfiguration of MacPorts gcc13, which exposes invalid definition of MB_LEN_MAX in gcc's fallback copy of limits.h (MacPorts [#69374]). - Port patches * ncurses-5.9-ibm327x.dif * ncurses-6.4.dif ==== openSUSE-release ==== Version update (20240326 -> 20240327) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen

1 0

kernel-firmware-20240322 breaks iwlwifi
by Manfred Hollstein 28 Mar '24

28 Mar '24

On Wed, 27 Mar 2024, 16:00:42 +0100, Dominique Leuenberger wrote: > [...] > kernel-firmware (20240312 -> 20240322) Just a heads up for users of kernel-longterm: this firmware broke my wifi devices on two of my systems when kernel-longterm is booted. It does not appear to happen with the regular kernel-default. I'll run some further tests later today and create a bug report then. FWIW, this is shown in the journal: iwlwifi 0000:04:00.0: Microcode SW error detected. Restarting 0x0. iwlwifi 0000:04:00.0: Start IWL Error Log Dump: [...] Cheers. l8er manfred

2 3

sequoia-octopus-librnp has landed in Factory
by Adam Mizerski 28 Mar '24

28 Mar '24

Hello! Are you annoyed by having a PGP keyring in Thunderbird separate from your ~/.gnupg? There is a solution! The MozillaThunderbird package has now a new subpackage MozillaThunderbird-openpgp-librnp. This isn't that much exciting by itself, but it can be replaced by sequoia-octopus-librnp, that has just landed in Factory. Quoting from https://gitlab.com/sequoia-pgp/sequoia-octopus-librnp : > This is a drop-in replacement for the RNP library supported and shipped by Thunderbird. > This project is called the Octopus, because octopuses can fit themselves in unusual places, and in this project we reimplement the RNP API as used by Thunderbird using Sequoia. The package MozillaThunderbird-openpgp-librnp should be installed by default and installation of sequoia-octopus-librnp should always be an explicit action. If that's not the case, please raise it up.

4 5

openSUSE Release Engineering meeting 27.03.2024
by Lubos Kocman 28 Mar '24

28 Mar '24

How to join the meeting? https://calendar.opensuse.org/teams/release/events/opensuse_release_enginee… All meeting minutes can be found here: https://etherpad.opensuse.org/p/ReleaseEngineering-meeting ## Attendees ana, guillaumeg, DimStar, Sarah, lkocman, rbrown, wengel, ddemaio,maxlin, bmwiedemann ## Leap Leap 15.6 Build641.1 was published yesterday by Max Leap 15.6 Beta known issues page https://en.opensuse.org/openSUSE:Known_bugs_15.6 I need to look into Axel's submission Antonio just send submissions relevants to the KDE Gear update https://code.opensuse.org/leap/features/issue/154 ^ Many many thanks for amazing job in the Leap KDE space Antonio & friends. Leap 15.6 appliances are currently blocked at https://bugzilla.suse.com/show_bug.cgi?id=1213595 Fix in kiwi for ^ goes to maint update for 15.5/15.6 Internship interest in SUSE Czechia, we'll have to work out some plan. (COFIT Job fair) Merged pending submissions for openSUSE-repos (Slowroll + duplicate slashes). skelcd / EULA work on Micro 6.0 to finalize Package DVD builds ## openSUSE Tumbleweed (ana) openSUSE:Factory build fail stats: 135 failed 25 unresolvable (last week 149 failed, 23 unresolvable) https://tinyurl.com/ysy4nnnz => Around ~35 are python packages that are still failing to build (with Python 3.12), big improvement since last week More than 1200 SR accepted since last week. Most relevant updates: * kernel-source-longterm 6.6.22 * Linux kernel 6.8.1 * KDE release gear 24.02.1 * GNOME 46.0 * libzypp 17.32.0 + zypper 1.14.70 (try zypper dup --remove-orphaned) * shadow 4.15.1 (upstream bug blocking was fixed) * systemd 255.4 And many other new things: * bind 9.18.25 * cmake 3.29 * elfutils 0.191 * emacs 29.3 * Haskell ecosystem to compiler GHC version 9.8.2 * ghostscript 10.03.0 * GraphicsMagick 1.3.43 * OpenJDK 22 release (java-22-openjdk 22.0.0.0) * Mesa 24.0.3 * MozillaFirefox 124.0.1 * MozillaThunderbird 115.9.0 * Qt 5.15.13 * rust1.77 to version 1.77.0 default! * TeXLive 2024 * wine 9.5 Updates waiting / work still in progress: * Plasma 6.0.3 + Qt 6.6.3 * autoconf 2.72, waiting released libreoffice 24.2.2 (end of March, ready in devel project) ### longer-lasting topics * GCC 14: second phase ongoing, use gcc14 as the default compiler (Staging:Gcc7) * RPM 4.19.1.1 + 4.20 * RPM 4.19.1.1 (user/group dependencies), Packages not included in rings getting updates, still some more to go. Few remaining packages: (9) https://bugzilla.opensuse.org/showdependencytree.cgi?id=1221415 * Preparations for RPM 4.20, %patchN won't be supported anymore, see https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/… (as last week there were 188 spec files left with this issue in Factory) * Python 3.12+removal of 3.9 modules: Not all modules fixed to build with Python 3.12, removal of python 3.9 modules blocked by build failures. Python3.9 interpreter would stay for some time more. * go1.22 as default go version, blocked on i586 with packages which export CGO_ENABLED=0 and go build -buildmode pie https://github.com/golang/go/issues/64875 (needs to update ~70 packages) traking at https://bugzilla.opensuse.org/show_bug.cgi?id=1221095 * libxml 2.12.1, on hold, no progress * dbus-broker as default dbus session manager, now everything builds, two openQA checks failing. * memtest86+ (waiting for update of installation-images, https://bugzilla.opensuse.org/show_bug.cgi?id=1221221 ) * grub2 with support for BLS - Boot Loader Specification, blocked by a kiwi update, open issue https://build.opensuse.org/request/show/1161323 https://github.com/OSInside/kiwi/issues/2497 ## Richard (Aeon+botmaster) A number of Release Announcements are currently being blocked as spam by lists.opensuse.org. This has (finally) been reported to admin(a)opensuse.org (which was also blocking the error reports...) lkocman: sourcedvd requests have also like 5 spam messages a day from various domains. It wasn't like that a year ago Richard: which email address is used for build failure announcements? Is it @suse.de? Dimstar: it's @opensuse.org one. Building mkosi based images, in doing so found plenty of issues with mkosi packaging (fixed with consultation with upstream), and possibly obs-build (to be reported after packaging issues fixed) But basic images are now building, figuring out how to actually make them bootable now Adrian: I was not aware that we're using mkosi for building images. Luka + Ludwig? working on it. Rebasing images might be broken. Richard: missing deps were sent to mkosi, they should be on the way to Factory. tik (Transactional Installation Kit) is now packaged and will be otw to Factory soon, but should only be used in conjunction with images - installing on any other system will turn it into an installer and just boot into tik. ## Max Leap 15.6 - build stats in Backports: 42 failed(was 80), 5 unresolvable(was 30) lkocman: Great job Max! * Published build641.1 on Mar. 26 * More build fixes has been merged * Dropped unneed haskell package * Dropped build unresolvabled Django module package lkocman: SLES 15 SP6 working towards their first RC. Please expect ## Guillaume - Arm * Tumbleweed: - Rolling - WIP: Still some packages built without PAC/BTI - rpmlint: https://rpmlint.opensuse.org/ * we noticed that rpmlint does not check anymore for packages built without distro %{optflags}. We should add it back. https://bugzilla.opensuse.org/show_bug.cgi?id=1217840 Doug: rpmlint GSOC topic. Neal will be helping to mentor that. https://github.com/openSUSE/mentoring/issues/204 * Leap 15.6/Backports SP6: - Fixed: Firefox killed due to OOM - https://bugzilla.opensuse.org/show_bug.cgi?id=1221314 ## Sarah - s390x Tumbleweed: - plasma6-desktop requires xorg drivers (already sumbmitted with removing ExclusiveArch) - z13 not supported any more for python-numpy (End of Life announced for z13 end of the year): VXE as CPU feature forced: https://bugzilla.opensuse.org/show_bug.cgi?id=1221902 - Upstream gcc Developers want to receive additional hints with packages for a high amount of used memory: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=101523 Adrian will look into this. -> Most memory problems solved - Adopted constraints based on improvements: PostgreSQL16, kokkos, arpack-ng Question: Does anybody know a raising package with high memory usage on s390x? Miroslav Franc mentioned some potential issue with memory flushing on s390x which could be causing random fails. Could that be related? (lkocman will mention it to Marcela+Ihno so she can look into it). Miroslav mentioned https://gcc.gnu.org/bugzilla/show_bug.cgi?id=101523 which he got from Marcela this is separate issue from https://bugzilla.suse.com/show_bug.cgi?id=1214702 Both can cause unstable workers the latter is the TLB/flush firmware issue, where we're pending patch to supply further debugging info from runtime. ## Doug * Desktop wallpaper collection * Request is made for Leap 16 * Lubos and I have access to UI/UX team tool (airtable) * The idea is: an abstract wallpaper with the project logo that could be used across all distros, one abstract with the distribution logo, a night/day digital art one with chameleon, and two photos from a community photo competition or similar. * Interest expressed by BYU-Idaho to start a Linux Society * metrics.opensuse.org * Beta info is being captured * Waiting on reply about OSRT:Review panel * Experiencing login issues with wiki (progress.o.o. #157852 update) * Need infra to physically access beans/matamo machine to verify/fix problem #154984 * Send marketing package for Augsburg event * Contribution Workshops * More sign ups at https://etherpad.opensuse.org/p/openSUSE-Contribution-Workshop * Episode 4 - Rust Packaging (238 Views) * Episode 5 - Contributing to openSUSE Leap - Project structure, feature tracking, package updates for SLES packages (next week) * Episode 6 - Host your own openSUSE mirror (Upload expected next week) * Episode 7 - Custom openSUSE (Leap / Leap Micro) image spin in a few minutes. (Needs scheduling) * Plasma 6 & GNOME 46 articles published * GSoC * Interest expressed by mentee to work on the Dyad proposal. https://github.com/openSUSE/mentoring/issues/211 * Will need collective assistance from project contributors as this is a large project * Ranking due from admins on April 24 by 18:00 UTC lkocman: there was a person or two asking about GSOC @COFIT job fair. We probably need to promote the option (SUSE/openSUSE mentorship) more on university events. * Community Summit * 14 Registrations, 9 Submissions, 4 Hours * openSUSE Conference * 73 Registrations, 41 Submissions, 23 Hours (5 Open 4 Business Submissions) Static * oSC24 dates June 27 to 29 reserved (Thursday - Saturday) * Open 4 Business June 26 between 2 - 6 p.m. at Franken Campus * AI topics (static) ## Dirk Not available ## Wolfgang (Package Hub), Scott Bahling - fixed annoying bug in openSUSE:Backports:SLE-12-SP5 where repo data for some packages was invalid - python2 cleanup in subpackages for SLE-15-SP6 ## Maintenance team (Marcus or Maurizio (m4u)) Not available ## Adrian - OBS No update ## Bernhard Slowroll * Added https://trello.com/b/dAWnojmd/slowroll * Got rid of most bogus downgrades (except with _multibuild) * configured update repo as 'maintenance_release' to keep old packages * configured zstd repo metadata * tested openSUSE-repos update * https://en.opensuse.org/index.php?title=openSUSE:Slowroll&diff=185407&oldid… ## Open Floor Some complains about jitsi, reconnects needed (evidence from today morning with 5th person on the call). People suggest to use substitute. Should we go back to google-meet? I have no issue with that. https://progress.opensuse.org/issues/155185 - is still open currently owned by SchoolGuy/ lkocman: Enno confirmed that he'll join, Georg has a conflict Adrian: a lots of delete requests, that will be automatically accepted in the afternoon today. The trigger was a change to multibuild. We're trying to remove unnecessary builds. Dominique: we don't have linked packages any more. So there should be no more of these.

2 1

New Tumbleweed snapshot 20240326 released!
by Dominique Leuenberger 27 Mar '24

27 Mar '24

Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&versio… Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: ImageMagick Mesa Mesa-drivers MozillaFirefox (123.0.1 -> 124.0.1) baobab (45.0 -> 46.0) bash-completion emacs-compat (29.1.4.4 -> 29.1.4.5) emacs-jinx (1.3 -> 1.4) emacs-vterm (696.c3a3a23 -> 698.ae4ae1a) ffado ffmpeg-6 file-roller (44.beta -> 44) folks (0.15.8 -> 0.15.9) gedit (46.1+135 -> 46.2) ghostscript (10.02.1 -> 10.03.0) gjs (1.80.0 -> 1.80.2) glibmm2 (2.78.1 -> 2.80.0) gnome-logs (45.beta -> 45.0) kernel-firmware (20240312 -> 20240322) libinput libksysguard6 libnfs (5.0.2 -> 5.0.3) libsmbios libunwind libvirt libwacom lvm2 lvm2-device-mapper malcontent mc open-vm-tools (12.3.5 -> 12.4.0) openSUSE-build-key opensuse-welcome patterns-gnome pcr-oracle pipewire polkit-default-privs (1550+20240311.559e6ac -> 1550+20240325.eddbe04) python-httpx (0.26.0 -> 0.27.0) python-psutil qt6-base salt thin-provisioning-tools vulkan-loader (1.3.275.0 -> 1.3.280.0) vulkan-tools (1.3.275.0 -> 1.3.280.0) wireplumber xen (4.18.0_06 -> 4.18.1_02) yast2-storage-ng (5.0.9 -> 5.0.10) === Details === ==== ImageMagick ==== Subpackages: libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - allow stdin/stdout - modified patches % ImageMagick-configuration-SUSE.patch ==== Mesa ==== Subpackages: Mesa-libEGL1 Mesa-libGL1 Mesa-libglapi0 libgbm1 - enable vulkan-beta meson flag for vulkan video support (suggested by "llyyr" <llyyr.public(a)gmail.com>; adding C flag - Wno-error=missing-prototypes for this wasn't necessary) - Add zink driver by default ==== Mesa-drivers ==== Subpackages: Mesa-dri Mesa-gallium Mesa-libva libxatracker2 - enable vulkan-beta meson flag for vulkan video support (suggested by "llyyr" <llyyr.public(a)gmail.com>; adding C flag - Wno-error=missing-prototypes for this wasn't necessary) - Add zink driver by default ==== MozillaFirefox ==== Version update (123.0.1 -> 124.0.1) Subpackages: MozillaFirefox-translations-common - Mozilla Firefox 124.0.1 https://www.mozilla.org/en-US/firefox/124.0.1/releasenotes/ MFSA 2024-15 (bsc#1221850) * CVE-2024-29943 (bmo#1886849) Out-of-bounds access via Range Analysis bypass * CVE-2024-29944 (bmo#1886852) Privileged JavaScript Execution via Event Handlers Mozilla Firefox 124.0 https://www.mozilla.org/en-US/firefox/124.0/releasenotes/ MFSA 2024-12 (bsc#1221327) * CVE-2024-2605 (bmo#1872920) Windows Error Reporter could be used as a Sandbox escape vector * CVE-2024-2606 (bmo#1879237) Mishandling of WASM register values * CVE-2024-2607 (bmo#1879939) JIT code failed to save return registers on Armv7-A * CVE-2024-2608 (bmo#1880692) Integer overflow could have led to out of bounds write * CVE-2023-5388 (bmo#1780432) NSS susceptible to timing attack against RSA decryption * CVE-2024-2609 (bmo#1866100) Permission prompt input delay could expire when not in focus * CVE-2024-2610 (bmo#1871112) Improper handling of html and body tags enabled CSP nonce leakage * CVE-2024-2611 (bmo#1876675) Clickjacking vulnerability could have led to a user accidentally granting permissions * CVE-2024-2612 (bmo#1879444) Self referencing object could have potentially led to a use- after-free * CVE-2024-2613 (bmo#1875701) Improper handling of QUIC ACK frame data could have led to OOM * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405, bmo#1881093) Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9 * CVE-2024-2615 (bmo#1881074, bmo#1881650, bmo#1882438) Memory safety bugs fixed in Firefox 124 - requires NSS = 3.98 rust-cbindgen >= 0.26 ==== baobab ==== Version update (45.0 -> 46.0) Subpackages: baobab-lang - Update to version 46.0: + Improved App metainfo. + Use enter instead of leave to update highlightitem. + Updated translations. ==== bash-completion ==== - Add patch boo1221414-scp.patch * Do not replace the asignment of the array COMPREPLY with the shell function _comp_compgen_split (boo#1221414) ==== emacs-compat ==== Version update (29.1.4.4 -> 29.1.4.5) - Update to version 29.1.4.5: * Update NEWS.org * compat-tests: Fix compat-thing-at-mouse test * Use https links everywhere * compat.texi: Use @dfn{Extended Definitions} * NEWS: Mention addition of compat.el to Emacs * compat.texi: Update manual after the inclusion of compat.el in Emacs * compat-tests: Fix commentary linter warnings * compat-tests: Use should-equal * compat--maybe-require: Rename macro to reduce churn ==== emacs-jinx ==== Version update (1.3 -> 1.4) - Update to version 1.4: * Update README * Fix: Ensure that `eval' local variable enabling `jinx-mode' works * yaml-mode/yaml-ts-mode: Alias to conf-mode * Remove TeX-mode alias * jinx-exclude/include-faces, jinx-exclude-regexps: Support mode aliases * jinx-correct-all: Restrict corrections to marked region * jinx-correct: Ensure that word is saved without text properties (Fix #140) ==== emacs-vterm ==== Version update (696.c3a3a23 -> 698.ae4ae1a) - Update to version 698.ae4ae1a: * Ensures the starting col is the same as later calculated * Fix typo: postion -> position ==== ffado ==== - Remove unnecessary BuildRequires on xdg-utils and update-desktop-files ==== ffmpeg-6 ==== Subpackages: libavcodec60 libavfilter9 libavformat60 libavutil58 libpostproc57 libswresample4 libswscale7 - Add 0001-avcodec-tests-rename-the-bundled-Mesa-AV1-vulkan-vid.patch ==== file-roller ==== Version update (44.beta -> 44) Subpackages: file-roller-lang - Update to version 44: + Fixes compilation when native app chooser is disabled. + Updated translations. ==== folks ==== Version update (0.15.8 -> 0.15.9) Subpackages: folks-data folks-lang libfolks-eds26 libfolks26 - Update to version 0.15.9: + simple-query: normalize phone numbers in search. + Updated translations. ==== gedit ==== Version update (46.1+135 -> 46.2) Subpackages: gedit-lang python3-gedit - Update to version 46.2: + Update URL gedit-technology.net -> gedit-technology.github.io. ==== ghostscript ==== Version update (10.02.1 -> 10.03.0) Subpackages: ghostscript-x11 - Version upgrade to 10.03.0: For openSUSE and SUSE Ghostscript is built '--without-tesseract' (see the entry below dated 'Mon Jul 18 07:28:54 UTC 2022'). Highlights in this release include: See 'Recent Changes in Ghostscript' at Ghostscript upstream https://ghostscript.readthedocs.io/en/gs10.03.0/News.html * As of this release (10.03.0) pdfwrite creates PDF files with XRef streams and ObjStm streams. This can result in considerably smaller PDF output files. See Vector Devices https://ghostscript.readthedocs.io/en/latest/VectorDevices.html for more details. * Ghostscript/pdfwrite now supports passing through PDF "Optional Content". * Our efforts in code hygiene and maintainability continue. * The usual round of bug fixes, compatibility changes, and incremental improvements. Incompatible changes (the release is listed in parentheses): * (10.03.0) Almost all the "internal" PostScript procedures defined during the interpreter startup are now "executeonly", further reducing the attack surface of the interpreter. The nature of these procedures means there should be no impact for legitimate usage, but it is possible it will impact uses which abuse the previous accessibility (even for legitimate reasons). Such cases may now require "DELAYBIND", See DELAYBIND https://ghostscript.readthedocs.io/en/latest/Use.html#ddelaybind * (10.03.0) The "makeimagedevice" non-standard operator has been removed. It allowed low level access to the graphics library in a way that was, essentially impossible to secure. * (10.03.0) The "putdeviceprops", "getdeviceprops", "finddevice", "copydevice", "findprotodevice" non-standard operators have all been removed. They provided functionality that is either accessible through standard operators, or should not be used by user PostScript. * (10.03.0) The process of "tidying" the PostScript namespace should have removed only non-standard and undocumented operators. Nevertheless, it is possible that any integrations or utilities that rely on those non-standard and undocumented operators may stop working or may change behaviour. If you encounter such a case, please contact us (Discord https://discord.gg/H9GXKwyPvY [#]ghostscript IRC channel https://web.libera.chat/#ghostscript or the gs-devel mailing list https://www.ghostscript.com/mailman/index.html would be best), but remember that free versions of Ghostscript come with with NO WARRANTY and NO SUPPORT. - Ghostscript 10.03.0 contains the fix to build with GCC 14 (boo#1221687) ==== gjs ==== Version update (1.80.0 -> 1.80.2) Subpackages: libgjs0 typelib-1_0-GjsPrivate-1_0 - Update to version 1.80.2: + Quick follow-up release to fix crash on ppc64. - Update to version 1.80.1: + Quick follow-up release to fix build failure on MacPorts and Homebrew. ==== glibmm2 ==== Version update (2.78.1 -> 2.80.0) Subpackages: libgiomm-2_68-1 libglibmm-2_68-1 - Update to version 2.80.0: + Glib: - Add wide_from_utf8() and wide_to_utf8() - DateTime: Add create_from_local_usec(), create_from_utc_usec() and to_unix_usec(). + Gio: - Application: Add get/set/property_version(). - ApplicationCommandLine: Add done(). - DBus::Message: Add get_arg0_path(). - Socket: Add receive_bytes() and receive_bytes_from(). - content_type_guess(): Remove most of an unnecessary overload. ==== gnome-logs ==== Version update (45.beta -> 45.0) Subpackages: gnome-logs-lang - Update to version 45.0: + Improve app metainfo. + Updated translations. ==== kernel-firmware ==== Version update (20240312 -> 20240322) Subpackages: kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-ath12k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network - Update to version 20240322 (git commit 9a6a0cc195c1): * mekdiatek: Update mt8186 SOF firmware to v2.0.1 * linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops * Montage: update firmware for Mont-TSSE * WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B * Intel Bluetooth: Update firmware file for Intel Bluetooth BE200 * Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101 * Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203 * Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211 * Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101 * Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101 * Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203 * Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203 * Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211 * Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211 * Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210 * Intel Bluetooth: Update firmware file for Intel Bluetooth AX200 * Intel Bluetooth: Update firmware file for Intel Bluetooth AX201 * Intel Bluetooth: Update firmware file for Intel Bluetooth 9560 * Intel Bluetooth: Update firmware file for Intel Bluetooth 9260 * amdgpu: DMCUB updates for various AMDGPU ASICs * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8 * imx: sdma: update firmware to v3.6/v4.6 - Update aliases from 6.8 kernels ==== libinput ==== Subpackages: libinput-udev libinput10 - remove dependency on /usr/bin/python3 using %python3_fix_shebang_path macro, [bsc#1212476] ==== libksysguard6 ==== Subpackages: ksysguardsystemstats6-data libKSysGuardSystemStats2 libksysguard6-imports libksysguard6-lang libksysguard6-plugins - Drop meanwhile unnecessary BuildRequires on WebEngine and WebChannel ==== libnfs ==== Version update (5.0.2 -> 5.0.3) - update to 5.0.3: * final release of the old API * Support NLM Share * Improved handling of PDUs * multithreading: do not wake up immediately if there are no events to process * Reduced memory allocations * Expose further configuration options * Bug fixes and developer visible fixes ==== libsmbios ==== Subpackages: libsmbios-lang libsmbios_c2 python3-smbios python3-smbios-utils - remove dependency on /usr/bin/python3 using %python3_fix_shebang macro, [bsc#1212476] ==== libunwind ==== - Drop BuildRequires on latex2man, the tarball has manpages already. This avoids a large dependency chain: * Add dont-disable-documentation-without-latex2man.patch ==== libvirt ==== Subpackages: libvirt-client libvirt-daemon-common libvirt-daemon-config-network libvirt-daemon-driver-interface libvirt-daemon-driver-libxl libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-lock libvirt-daemon-log libvirt-daemon-plugin-lockd libvirt-daemon-qemu libvirt-daemon-xen libvirt-libs - CVE-2024-2494: remote: check for negative array lengths before allocation bsc#1221815 ==== libwacom ==== Subpackages: libwacom-data libwacom9 - remove dependency on /usr/bin/python3 using %python3_fix_shebang macro, [bsc#1212476] ==== lvm2 ==== Subpackages: liblvm2cmd2_03 - remove dependency on /usr/bin/python3 using %python3_fix_shebang_path macro, [bsc#1212476] ==== lvm2-device-mapper ==== Subpackages: device-mapper libdevmapper-event1_03 libdevmapper1_03 - remove dependency on /usr/bin/python3 using %python3_fix_shebang_path macro, [bsc#1212476] ==== malcontent ==== Subpackages: libmalcontent-0-0 libmalcontent-ui-1-1 malcontent-control malcontent-lang typelib-1_0-Malcontent-0 - remove dependency on /usr/bin/python3 using %python3_fix_shebang macro, [bsc#1212476] ==== mc ==== Subpackages: mc-lang - remove dependency on /usr/bin/python3 using %python3_fix_shebang_path macro, [bsc#1212476] ==== open-vm-tools ==== Version update (12.3.5 -> 12.4.0) Subpackages: libvmtools0 open-vm-tools-desktop - update to 12.4.0: https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/Ch… There are no new features in the open-vm-tools 12.4.0 release. This is primarily a maintenance release that addresses a few critical problems, including: * A Github pull request has been handled. Please see the Resolved Issues section of the Release Notes. * A number of issues flagged by Coverity have been addressed. * For issues resolved in this release, see the Resolved Issues section of the Release Notes. ==== openSUSE-build-key ==== - Fix import-openSUSE-build-key:set proper timer name to try to stop (openSUSE-build-key-import.timer, not suse-build-key-import.timer) (boo#1221948). ==== opensuse-welcome ==== - remove dependency on /usr/bin/python3 using %python3_fix_shebang_path macro, [bsc#1212476] ==== patterns-gnome ==== Subpackages: patterns-gnome-gnome patterns-gnome-gnome_basic patterns-gnome-gnome_basis patterns-gnome-gnome_basis_opt patterns-gnome-gnome_games patterns-gnome-gnome_imaging patterns-gnome-gnome_internet patterns-gnome-gnome_multimedia patterns-gnome-gnome_office patterns-gnome-gnome_utilities patterns-gnome-gnome_x11 patterns-gnome-gnome_yast patterns-gnome-sw_management_gnome - Keep gedit instead of gnome-text-editor on SLE and Leap (bsc#1219646). ==== pcr-oracle ==== - Add fix_grub_bls_cmdline.patch to include the measurements of the cmdline and the linux and initrd grub commands ==== pipewire ==== Subpackages: gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire-alsa pipewire-jack pipewire-lang pipewire-libjack-0_3 pipewire-modules-0_3 pipewire-pulseaudio pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools - Avoid %if %{pkg_vcmp gcc < 8}, instead replicate the condition from the BuildRequires section. ==== polkit-default-privs ==== Version update (1550+20240311.559e6ac -> 1550+20240325.eddbe04) - Update to version 1550+20240325.eddbe04: * profiles: power-profiles-daemon (bsc#1219957) ==== python-httpx ==== Version update (0.26.0 -> 0.27.0) - Update to 0.27.0 * The app=... shortcut has been deprecated. Use the explicit style of transport=httpx.WSGITransport() or transport=httpx.ASGITransport() instead. * Respect the http1 argument while configuring proxy transports. (#3023) * Fix RFC 2069 mode digest authentication. (#3045) ==== python-psutil ==== - BuildRequire pkgconfig(libsystemd) instead of full systemd ==== qt6-base ==== Subpackages: libQt6Concurrent6 libQt6Core6 libQt6DBus6 libQt6Gui6 libQt6Network6 libQt6OpenGL6 libQt6OpenGLWidgets6 libQt6PrintSupport6 libQt6Sql6 libQt6Test6 libQt6Widgets6 libQt6Xml6 qt6-network-tls qt6-networkinformation-glib qt6-networkinformation-nm qt6-platformtheme-gtk3 qt6-printsupport-cups qt6-sql-mysql qt6-sql-sqlite - Replace the postgresql-server build dependency with the client library ==== salt ==== Subpackages: python3-salt salt-master salt-minion salt-transactional-update - Convert oscap output to UTF-8 - Added: * switch-oscap-encoding-to-utf-8-639.patch - Make Salt compatible with Python 3.11 - Added: * fix-salt-warnings-and-testuite-for-python-3.11-635.patch - Ignore non-ascii chars in oscap output (bsc#1219001) - Added: * decode-oscap-byte-stream-to-string-bsc-1219001.patch ==== thin-provisioning-tools ==== - Enable test execution during build - Modernise cargo packaging usage in spec file ==== vulkan-loader ==== Version update (1.3.275.0 -> 1.3.280.0) - Update to release SDK-1.3.280.0 * Bugfixes for Windows ==== vulkan-tools ==== Version update (1.3.275.0 -> 1.3.280.0) - Update to release SDK-1.3.280.0 * icd: Add AV1 decode support * Update linmath to upstream and add degreestoradians definition. This fixes bug in linmath function: quat_mul_vec3 ==== wireplumber ==== Subpackages: libwireplumber-0_5-0 wireplumber-audio wireplumber-lang wireplumber-zsh-completion - Add patch from upstream to fix all input sources only working when bluetooth profile is set to HSF/HFP, which was a regression in 0.5.0 (glfo#pipewire/wireplumber#598): * 0001-filter-utils-fix-handling-of-targetless-smart-filters.patch - Avoid %if %{pkg_vcmp gcc < 8}, instead replicate the condition from the BuildRequires section. ==== xen ==== Version update (4.18.0_06 -> 4.18.1_02) Subpackages: xen-libs xen-tools xen-tools-domU - bsc#1221334 - VUL-0: CVE-2024-2193: xen: GhostRace: Speculative Race Conditions (XSA-453) 65f83951-x86-mm-use-block_lock_speculation-in.patch - Update to Xen 4.18.1 bug fix release (bsc#1027519) xen-4.18.1-testing-src.tar.bz2 * No upstream changelog found in sources or webpage - bsc#1221332 - VUL-0: CVE-2023-28746: xen: x86: Register File Data Sampling (XSA-452) - bsc#1221334 - VUL-0: CVE-2024-2193: xen: GhostRace: Speculative Race Conditions (XSA-453) - Dropped patches included in new tarball 654370e2-x86-x2APIC-remove-ACPI_FADT_APIC_CLUSTER-use.patch 65437103-x86-i8259-dont-assume-IRQs-always-target-CPU0.patch 655b2ba9-fix-sched_move_domain.patch 6566fef3-x86-vLAPIC-x2APIC-derive-LDR-from-APIC-ID.patch 6569ad03-libxg-mem-leak-in-cpu-policy-get-set.patch 656ee5e1-x86emul-avoid-triggering-event-assertions.patch 656ee602-cpupool-adding-offline-CPU.patch 656ee6c3-domain_create-error-path.patch 6571ca95-fix-sched_move_domain.patch 6578598c-Arm-avoid-pointer-overflow-on-invalidate.patch 65842d5c-x86-AMD-extend-CPU-erratum-1474-fix.patch 65a7a0a4-x86-Intel-GPCC-setup.patch 65a9911a-VMX-IRQ-handling-for-EXIT_REASON_INIT.patch 65b27990-x86-p2m-pt-off-by-1-in-entry-check.patch 65b29e91-x86-ucode-stability-of-raw-policy-rescan.patch 65b8f961-PCI-fail-dev-assign-if-phantom-functions.patch 65b8f9ab-VT-d-else-vs-endif-misplacement.patch xsa451.patch ==== yast2-storage-ng ==== Version update (5.0.9 -> 5.0.10) - GuidedProposal: internal settings to control the configuration of boot-related partitions and the usage of adjust_by_ram. - Needed for gh#openSUSE/agama#1111 - 5.0.10

1 0

Re: zypper-1.14.70 will support a new option: 'dup --remove-orphaned' to remove all unneeded orphans.
by Michael Andres 27 Mar '24

27 Mar '24

On Tuesday 26 March 2024 09:09:31 Michal Hrusecky wrote: > Michael Andres via openSUSE Factory - 8:54 26.03.24 wrote: > > On Monday 25 March 2024 22:30:26 -pj via openSUSE Factory wrote: > > > On 03-25-2024 08:31AM, Michael Andres via openSUSE Factory wrote: > > > > ...and not just the ones otherwise blocking the dup. > > > > > > Would passing the command then wipe out needed existing orphaned files? > > > e.g. On the machine here there are important and needed printer and > > > scanner packages. > > > > 'Needed' is 'required by other packages', not 'important for user or > > functionality'. > > How does zypper tracks what is Needed? Dependency-wise, there has to be > something requiring leaf packages in dependency tree. When I install > `mc`, there is no other package requiring it, so it is Unneeded orphan? > 🤔 This sounds like something I was missing for quite some time, would > be nice to see a list of leaf packages that I have installed and decide > that I no longer need this branch... Or did I misunderstood what it > does? An orphan (AKA dropped, unwanted) (zypper packages --orphaned) is a package which is not part of any enabled repository nor does it have update candidates within those repos. So orphans contain discontinued packages as well as 3rd party packages IF they are not provided by a repository. Unneeded (zypper packages --unneeded) are autoinstalled packages which are not required by other packages. When removing packages you can use `zypper remove --clean-deps` to remove the package along with it's unneeded dependecies (or set solver.cleandepsOnRemove in /etc/zypp/zypp.conf and use --no-clean-deps to disable it for one command). -- cu, Michael Andres +------------------------------------------------------------------+ Key fingerprint = 2DFA 5D73 18B1 E7EF A862 27AC 3FB8 9E3A 27C6 B0E4 +------------------------------------------------------------------+ Michael Andres (he/him/his), Engineering & Innovation, ma(a)suse.com +------------------------------------------------------------------+ SUSE Software Solutions Germany GmbH www.suse.com Frankenstr. 146, 90461 Nuernberg, Germany Geschäftsführer: Ivo Totev, Andrew McDonald, Werner Knoblich (HRB 36809, AG Nürnberg) +------------------------------------------------------------------+

4 7